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Method and Device for Transmitting Safety-critical Operating 
Conditions of a Motor Vehicle 

TECHNICAL FIELD 

The present invention generally relates to a method for 
transmitting safety-critical operating conditions and more 
particularly relates to a method for transmitting a safety- 
critical operating condition of a safety-critical system of a 
motor vehicle to the driver of a vehicle-? — and a device for 
implementing the method . 

BACKGROUND OF THE INVENTION 

DE 199 61 871 Al discloses a driver information system 
detecting several operational data of a motor vehicle by means 
of a control unit and defining a priority in terms of the 
relevance of the operational data for the driver and 
transmitting it to the driver by means of a signal. It is 
considered a shortcoming in the prior art driver information 
system that a defect of the output unit drawing the driver's 
attention to critical operating conditions by way of an optical 
and/or audible signal is not discovered. 

BRIEF SUMMARY OF THE INVENTION 

In view of the above, an object of the invention is to develop 
a method of transmitting a safety-critical operating condition 
of a motor vehicle to the driver that operates reliably even if 
optical or acoustic output units are defective. 
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According to the invention, this object is achieved in that 
measures are provided making the driver aware of the safety- 
critical operating condition by way of an impaired comfort. 
Further, it is thereby ensured that the driver cannot ignore 
optical and/or audible signals of an operative output unit 
indicative of a safety-critical operating condition. 

In a favorable improvement, the measures are taken on a 
temporally limited basis and/or a recurrent basis, and the 
measures are carried out in consideration of the current 
driving situation. Due to these measures resulting in loss in 
comfort it is unmistakably conveyed to the driver that the 
motor vehicle suffers from at least one safety-critical 
operating condition . 

To render the idea of the invention more precise, it is 
arranged for to carry out the measures in consideration of the 
current driving situation, and the selection of the measures 
depends on the duration and/or the seriousness of the safety- 
critical operating condition as regards the safety of operation 
of the motor vehicle. 

In a particularly favorable manner, the measures involve a 
deactivation of the internal combustion engine during 
standstill of the motor vehicle that is unwanted by the driver 
or an actuation of the acoustic alarm device (horn) unwanted by 
the driver when the doors of the motor vehicle are opened and 
closed. 

According to further favorable embodiments, the measures 
involve an operation of the electric window lifters unwanted by 
the driver during standstill of the motor vehicle or a 
deactivation of the multimedia device unwanted by the driver. 
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In a particularly advantageous embodiment the measures 
represent a faulty oil-level tell-tale or a faulty tank 
capacity tell-tale. Besides, the measures involve a raised 
temperature indication or an incorrect rotational speed 
indication of the internal combustion engine of the motor 
vehicle . 

Further, the measures involve an actuation of the electrically 
adjustable outside rearview mirrors or of the electrically 
adjustable seats during standstill of the motor vehicle being 
unwanted by the driver. 

According to another realization of the idea of the invention, 
the measures involve switching on the dimmed headlight unwanted 
by the driver or switching off the power steering system 
unwanted by the driver. 

In another favorable design of the subject matter of the 
invention, the measures involve an additional signal in a brake 
system with electronically adjustable brake forces which 
influences the desired brake force to such effect that a 
fluctuation in the longitudinal deceleration can be detected 
which corresponds in its mean value per unit time to the 
desired brake force, however. 

Besides, it is arranged for that the measures involve a change 
of the pedal -travel /brake -force characteristics. 

The device of the invention for implementing the method 
provides a central control unit sensing the safety-relevant 
operating conditions and triggering measures. The central 
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control unit can be integrated into an instrument combination 
device . 

BRIEF DESCRIPTION OF THE DRAWINGS 

The method of the invention will be explained in detail 
hercinbelow by way of an embodiment making reference to the 
accompanying drawing, — feThe only Figure thereof representsing a 
chronological order starting from the report of a critical 
operating condition to the driver by means of an optical or 
acoustic signal until the remedy of the critical operating 
condition. 

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS 

Methods for transmitting critical operating conditions of 
systems and system components of a motor vehicle are known from 
the state of the art. In general, an optical or an audible 
signal is produced and sent to the driver when a system or a 
system component of the motor vehicle reaches a critical 
operating condition. If, for example, the anti-lock system is 
defective or operative only within limits, this critical 
operating condition is transmitted to the driver by means of a 
so-called small control lamp, with the control lamp mounted in 
the instrument panel lighting up in an enamel for signals. If 
the driver ignores this alarm signal, or is the control lamp 
defective, the critical operating condition of a motor vehicle 
system is not transmitted to the driver, what leads to a 
substantial loss in the general traffic safety. To ensure the 
transmission of a critical operating condition of a motor 
vehicle system to the driver, according to the present 
invention, further measures are provided in addition to optical 
and audible signals, making the driver aware of the critical 
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operating condition. The target of these measures is to 
considerably limit the driving comfort of the driver. This will 
induce the driver to see a workshop, and the critical operating 
condition can be removed professionally and shortly after the 
critical operating condition has occurred. 

It is arranged for that the measures for reducing the driving 
comfort are carried out on a temporally limited basis and on a 
recurrent basis. This means that the provided measures are 
carried out once to begin with, and within time limits and, if 
the driver does not feel compelled to seek advice in a 
workshop, will be recurrent with the progressive operating time 
of the motor vehicle and a continuing critical operating 
condition. Besides, the current driving situation is taken into 
consideration when executing the measures for reducing the 
comfort. Thus, the deactivation of the internal combustion 
engine unwanted by the driver is performed as a measure for 
reducing the driving comfort only during standstill of the 
motor vehicle in order not to adversely affect the general 
safety. 

One embodiment of the method of the invention is illustrated in 
the drawing. The illustrated stretch of time mirrors the 
operating time of the motor vehicle. The anti-lock system of 
the braking system fails at time 101. This fact is conveyed to 
the driver at time 101 by means of an optical signal of the 
control lamp. If the control lamp is defective or if the driver 
ignores the optical signal, a first measure for reducing the 
driving comfort is initiated after another operating time of 
the motor vehicle of two hours. Starting from time 102, the 
internal combustion engine is switched off during longer phases 
of standstill, e.g. while the driver is waiting to continue 
driving in front of a red light. It is thus signaled to the 
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driver that his motor vehicle is malfunctioning. In addition, 
the driving comfort is limited by the re-start of the internal 
combustion engine which must be performed manually, what 
induces the driver to go to a workshop for eliminating the 
actual cause of the internal combustion machine disconnecting 
several times, i.e. the defective anti-lock system. 

If the driver continues ignoring the obvious losses in comfort, 
a second measure will be taken at time 103, meaning four hours 
after the first measure has been initiated. To this end, the 
power steering system is disconnected, what means a 
considerable loss in driving comfort for the driver. However, 
the power steering is disconnected only after deactivation of 
the internal combustion engine, in order that the driver does 
not have to expect a changed expenditure of force for turning 
the steering wheel during the current driving operation. If the 
driver now as before does not seek help in a workshop, a third 
measure to reduce the driving comfort is initiated at time 104 . 
To this end, the acoustic warning device (horn) is actuated in 
such a fashion that a short signal is generated as soon as the 
driver opens or closes the doors of the motor vehicle. 

After another four hours of operating time, during which the 
three described measures for reducing the driving comfort were 
effective, the driver consults a workshop at time 105 and has 
the defective anti-lock system repaired. The effect is that a 
critical operating condition of a system or a system component 
no longer prevails in the motor vehicle, and the measures 
introduced for reducing the driving comfort are stopped. 

The method of the invention arranges for further measures, 
which limit the driving comfort of the driver and make him 
aware of the safety-critical operating condition. 
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As this occurs, an activation of the window lifters unwanted by 
the driver during standstill of the motor vehicle represents a 
reduction of the driving comfort exactly as the unwanted 
deactivation of the multimedia device of the motor vehicle. 
Another measure limiting the driving comfort of the driver is 
realized by the actuation of the electrically adjustable 
exterior rearview mirrors or the electrically adjustable seats 
during standstill of the motor vehicle, which is unwanted by 
the driver. An activation of the dimmed headlight unwanted by 
the driver also represents a loss of the driving comfort for 
the driver. Due to their effect on the driver, these measures 
are appropriate to make the driver notice a critical operating 
condition of the motor vehicle and induce him to see a 
workshop . 

Further measures making the driver aware of the fact that his 
motor vehicle has a defect are achieved by means of a raised 
temperature indication or a faulty rotational speed indication 
of the internal combustion engine. A faulty oil-level tell-tale 
or a faulty tank capacity tell-tale also indicate a critical 
operating condition of a motor vehicle system to the driver. 

The measures being carried out for the purpose of warning the 
driver are selected in consideration of the duration of the 
safety-critical operating condition. If a safety-critical 
operating condition lasts beyond a predetermined stretch of 
time, a measure is chosen which limits the driving comfort for 
the driver to a greater degree. This will expressly indicate to 
the driver that he must see a workshop. Besides, the selection 
of the measures for reducing the driving comfort is determined 
in dependence on the seriousness of the safety-critical 
operating condition. A less serious safety-critical operating 
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condition will consequently entail a less significant measure 
for reducing the driving comfort than a safety-critical 
operating condition that takes a direct effect on the traffic 
safety. 

In a motor vehicle having a braking system with electronically 
adjustable brake forces, the method of the invention provides 
that the braking request of the driver is realized in a 
modified manner when a safety-critical operating condition 
shall be conveyed. To this end, an additional signal is 
produced in an electronic control and regulation unit 
(hereinbelow referred to as ECU) provided in the braking 
system, which influences the desired brake force to such effect 
that the driver feels a fluctuation of the longitudinal 
deceleration which in the average time value corresponds to the 
desired brake force, however. This modified realization of the 
brake force request also represents a reduction of the driving 
comfort for the driver. Another measure for transmitting a 
safety-critical operating condition to the driver is realized 
by the change of the pedal -travel/brake- force characteristics 
in a motor vehicle with electronically adjustable brake forces. 
In this arrangement, the ECU changes the pedal -travel /brake - 
force characteristics to which the driver is accustomed to such 
end that the driver is limited in his driving comfort due to 
the unusual new operation of the braking system. 

To implement the method of the invention, a central control 
unit is provided to which the safety-relevant operating 
conditions of the systems or the system components of the motor 
vehicle are sent. Starting from this central control unit, the 
appropriate measure for the reduction of the driving comfort is 
chosen, as has been described in detail, and the control unit 
of the system related to the measure is actuated accordingly. 
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It is especially favorable that the central control unit is 
integrated into the instrument combination device because in 
this case the safety-critical operating conditions in prior-art 
driver information systems are sent to the driver by means of 
the known control lamps. Starting from the delivered safety- 
critical operating conditions, the measures for reducing the 
driving comfort can be reliably initiated. 

However, it is also possible to initiate the methods for 
reducing the driving comfort in a decentralized fashion. This 
implies that each system having a safety-critical operating 
condition will directly introduce measures for reducing the 
driving comfort. The above-mentioned braking system with 
electronically adjustable brake forces will consequently carry 
out the modified realization of the braking request of the 
driver or a change in the pedal -travel /brake -force 
characteristics when a safety-critical operating condition 
occurs . 



